Toggle light / dark theme

Get the latest international news and world events from around the world.

Log in for authorized contributors

Black Hole Collisions May Follow a Surprisingly Simple Rule

The size of a black hole formed by the merger of two orbiting black holes can be predicted using simple thermodynamics. Two black holes locked in orbit do not remain apart forever. As they spiral closer, they eventually collide in an extraordinarily energetic event that warps the surrounding univ

Kimi K3 Agents Found Redis ZeroDays and Built RCE Exploit, Researchers Say

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0.

All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis says the underlying memory flaws may lead to remote code execution.

Redis 6.2.23, 7.2.15, and 7.4.10 fix the Streams shared-NACK use-after-free; Redis 8.2.8, 8.4.5, and 8.6.5 fix both the Streams issue and the RedisBloom and TDigest out-of-bounds writes; Redis 8.8.1 fixes the RedisBloom and TDigest loaders, while the Streams guard was already present in Redis 8.8.0.

/* */